Topic: free ssl providers

[holziusa]

fyi:free ssl providers
"startcom.org" recognized since 2009 by all browsers
have not tested yet

[Steffen]

Your url is wrong. Btw, why are used to put url's between quotes ?

Must be: http://www.startssl.com/

Using already for years a class 2 one.

Steffen

[holziusa]

habit i guess ..was the free one available two years ago...any issues....... had trouble with their site last night called # in Israel he sounded like he just got out of bed...probably was(-:

[glsmith]

I've been using them for more than 5 years, and yes the free was was there back then. It however took a few years to get IE and Opera (being the last) to accept them.

[mike.0302]

[Jan-E]

Hidden in the Bulletproof TLS Newsletter 48
https://www.feistyduck.com/bulletproof-tls-newsletter/issue_48_google_starts_cecpq2, there is a new Norwegian free SSL provider with the same services as Letsencrypt. Key difference: certificates are twice as long valid as those of Letsencrypt, 180 in stead of 90 days.

Buypass Go SSL
https://www.buypass.com/ssl/products/acme

[DnvrSysEngr]

Jan-E:

Looks interesting, I think I may try it out - see if it is easy to get set up and running on Apache 2.4.37.

-S

[DnvrSysEngr]

Well, may scratch the idea as the client they recommend you use (CERTBOT) does not work on Windows.

[James Blond]

There are several certbots for windows command line

See https://letsencrypt.org/docs/client-options/

@Steffen which bot do you use? I forgot

[Jan-E]

Steffen uses mod_md.so nowadays, which is hardcoded for Letsencrypt.

[Steffen]

Nope using https://github.com/PKISharp/win-acme/

[DnvrSysEngr]

Tried latest Win-Acme. It is geared more towards IIS. There is a workaround for Apache (a bit awkward).

Ran into some snags with redirects. May play with it more this weekend to see if I can get it to work.

[Steffen]

[DnvrSysEngr]

Steffen:

I am correct, mod_md is hard-coded to only use LetsEncrypt.

-S

[Steffen]

https://scotthelme.co.uk/having-a-backup-ca-for-lets-encrypt/

In this article, although he uses certbot and acme_tiny, i noticed him mentioning a possible issue:

The Buypass ACME API endpoint isn't actually fully compliant with the spec and while other clients can tolerate that and still function, acme_tiny can't.

[Brian Gimbli]

My provider include ssl in my account for one price with hosting. It's two service for one price.

[dpat99]

SSL should be free for all, I know some hostings take money for actually providing free SSL, so they basically do nothing and charge for it...